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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1 . (Currently Amended) A system to maintain application data stored on 
a portable computer secure, the system comprising: 

an authorization client for use on the portable computer for making requests, 
the portable computer being capable of providing in-memory portions of address space for an 
application program; 

a security device to be associated with an authorized user of the portable 
computer and including an authorization server for supplying responses to the requests; 

a communication subsystem for wirelessly communicating the requests and the 
responses to the server and the client, respectively, within a range; and 

a cryptographic subsystem for encrypting data located in the in-memory portions 
of the address space to obtain corresponding encrypted data when the security device is outside 
the range of the communication subsystem and for decrypting the encrypted data when the 
security device is back within the range[[.]]i 

wherein the requests include cryptographic requests for cryptographic 
information and wherein the server supplies the cryptographic information in response to the 
cryptographic requests and wherein the cryptographic subsystem utilizes the cryptographic 
information to either encrypt or decrypt the data. 

2. (Cancelled) 

3. (Original) The system as claimed in claim 1 further comprising means 
for suspending substantially all authorized user processes on the computer when the security 
device is outside the range and means for restarting the suspended authorized user processes 
on the computer when the security device is back within the range. 
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4. (Currently Amended) The system as claimed in claim [[2]] 1 wherein 
the cryptographic information includes keys. 

5. (Original) The system as claimed in claim 4 wherein the keys are 

encrypted. 

6. (Original) The system as claimed in claim 1 further comprising means 
for suspending selected authorized user processes on the computer when the security device 
is outside the range and means for restarting the selected authorized user processes on the 
computer when the security device is back within the range. 

7. (Original) The system as claimed in claim 1 further comprising a 
mechanism for establishing a binding between the portable computer and the security device 
to ensure that the security device only responds to a portable computer with a valid binding. 

8. (Original) The system as claimed in claim 1 wherein the security device 
is an authorization token. 

9. (Original) The system as claimed in claim 4 wherein the keys include 
at least one master key. 

10. (Original) The system as claimed in claim 9 wherein the at least one 
master key is a key-encrypting key. 

11. (Currently Amended) The system as claimed in claim [[2]] I wherein 
the cryptographic subsystem includes encrypted keys and wherein the cryptographic 
information includes keys for decrypting the encrypted keys. 

12. (Currently Amended) A method to maintain application data stored on 
a portable computer secure, the method comprising: 
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providing an authorization client for use on the portable computer for making 
requests, the portable computer being capable of providing in-memory portions of address 
space for an application program; 

providing a security device to be associated with an authorized user of the 
portable computer and including an authorization server for supplying responses to the 
requests; 

wirelessly communicating the requests and the responses to the server and the 
client, respectively, within a range; 

encrypting data located in the in-memory portions of the address space to obtain 
corresponding encrypted data when the security device is outside the range; and 

decrypting the encrypted data when the security device is back within the 

range[[.]]i 

wherein the requests include cryptographic requests for cryptographic 
information and wherein the server supplies the cryptographic information in response to the 
cryptographic requests and wherein the cryptographic information is used to either encrypt or 
decrypt the data. 

13. (Original) The method as claimed in claim 12 further comprising 
suspending substantially all authorized user processes on the computer when the security device 
is outside the range and restarting the suspended authorized user processes on the computer 
when the security device is back within the range. 

14. (Cancelled) 

15. (Original) The method as claimed in claim 12 further comprising 
establishing a binding between the portable computer and the security device to ensure that the 
security device only responds to a portable computer with a valid binding. 

16. (Original) The method as claimed in claim 12 further comprising 
suspending selected authorized user processes on the computer when the security device is 
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outside the range and restarting the selected authorized user processes on the computer when 
the security device is back within the range. 

17. (Currently Amended) The method as claimed in claim [[14]] 12 wherein 
the cryptographic information includes keys. 

18. (Original) The method as claimed in claim 17 wherein the keys include 
at least one master key. 

19. (Original) The method as claimed in claim 18 wherein the at least one 
master key is a key-encrypting key. 

20-25. (Withdrawn) 
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